b45cd50bd3d5db6cb3e5889b960fdfb7_JaffaCakes118

General

Target
b45cd50bd3d5db6cb3e5889b960fdfb7_JaffaCakes118
Size 408KB
Sample240616-tf3zbstdnq
SHA256 d3f52b04b3bef1998a713fecaedd72571949ff4e62e83f54896a42e6e26582e7
MD5 b45cd50bd3d5db6cb3e5889b960fdfb7
SHA1 c45485a4eb8211269e1897ee018fb6d181744976
SHA512 754b5c5d8228e0843d091613183bf4cf58b01088d88404196368ec040837cfb594b677c07b0d1b915937b2838b06af680471bf342bbac62dca442fd1b9f6803d
SSDEEP 6144:lcN+ZQW4GQUa7gLASsKOp4Wk2p4X1iPA8tPVPVahgxzKYLBeqxRp37B:+YCBUdUHp4Wk2pAUPoM11eUZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b45cd50bd3d5db6cb3e5889b960fdfb7_JaffaCakes118

File Explorer

b45cd50bd3d5db6cb3e5889b960fdfb7_JaffaCakes118

.exe 408KB

b45cd50bd3d5db6cb3e5889b960fdfb7_JaffaCakes118

IMPHASH 01740c8f27d1919821ee2487cf2f8acc
SHA256 d3f52b04b3bef1998a713fecaedd72571949ff4e62e83f54896a42e6e26582e7
MD5 b45cd50bd3d5db6cb3e5889b960fdfb7
SHA1 c45485a4eb8211269e1897ee018fb6d181744976
SHA512 754b5c5d8228e0843d091613183bf4cf58b01088d88404196368ec040837cfb594b677c07b0d1b915937b2838b06af680471bf342bbac62dca442fd1b9f6803d
SSDEEP 6144:lcN+ZQW4GQUa7gLASsKOp4Wk2p4X1iPA8tPVPVahgxzKYLBeqxRp37B:+YCBUdUHp4Wk2pAUPoM11eUZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5140

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList ord697 _adj_fdiv_m64 ord512 __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError ord661 __vbaRecDestruct __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin ord632 ord525 __vbaChkstk EVENT_SINK_AddRef __vbaStrCmp DllFunctionCall __vbaVarLateMemSt _adj_fpatan EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord609 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal __vbaI2Var ord537 ord645 _CIlog __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord617 _CIatan __vbaStrMove ord542 ord650 _allmul ord651 _CItan ord546 _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

b45cd50bd3d5db6cb3e5889b960fdfb7_JaffaCakes118

msvbvm60

generic